Re: X11 forwarding *works* for root, but not me -- what changed?
- From: nobody@xxxxxxx (Kevin the Drummer)
- Date: 05 Apr 2006 15:54:01 GMT
Kevin the Drummer <nobody@xxxxxxx> wrote:
After a machine reboot X11 forwarding no longer works for me.
But, it does work for root. This is backwards of the typical problem.
The error message I get is:
X connection to myhost.mydom.com:11.1 broken (explicit kill or server shutdown).
- The DISPLAY is the same for me as for root.
- root relies exclusively on /etc/ssh_config, i.e. there is no
~root/.ssh/config
'xauth -list' for root and for myself showed different magic cookies.
Merging root's magic cookie into my own .Xauthority fixed the immediate
problem. Shutting down X on the afflicted machines, zeroing out the
..Xauthority files, then restarting X seems to have solved most of the
problems. There is still one problem remaining though.
The remaining problems regards starting of 'exmh' like so:
/usr/bin/ssh myhost.mydom.com -f 'ssh anotherhost.mydom.com exmh'
I know that this looks a little odd, but this works:
/usr/bin/ssh myhost.mydom.com -f 'ssh anotherhost.mydom.com xterm'
/usr/bin/ssh myhost.mydom.com -f 'ssh anotherhost.mydom.com xlbiff'
I start the apps above like I do because 'myhost' is a quasi-DMZ.
The first time I tried to start 'exmh' as above I got
connect mhost.mydom.com port 6013: Connection refused
X connection to myhost.mydom.com:13.1 broken \
(explicit kill or server shutdown).
I already had ports 6000:6010 open on my firewall, and now I had to go a
bit farther to get 6013. After that, the error message is:
X11 connection rejected because of wrong authentication.
X connection to myhost.mydom.com:11.1 broken \
(explicit kill or server shutdown).
I have this set in my ssh config files:
/etc/ssh/ssh_config: ForwardAgent no
/etc/ssh/ssh_config: ForwardX11 yes
/etc/ssh/ssh_config: ForwardX11Trusted yes
/etc/ssh/sshd_config: X11Forwarding yes
/etc/ssh/sshd_config: X11UseLocalhost no
~/.ssh/config: ForwardX11 yes
~/.ssh/config: ForwardAgent yes
Part of what's happening seems to be that I get an incremented X display
for each new application that I launch. I think that everything used to
run on :10. But, now I'm getting :11, :12, :13, etc. It's possible
that if I could restrict this to :10, that just maybe life would be
easier.
Any guesses folks?
Thanks....
--
PLEASE post a SUMMARY of the answer(s) to your question(s)!
Show Windows & Gates to the exit door.
Unless otherwise noted, the statements herein reflect my personal
opinions and not those of any organization with which I may be affiliated.
.
- References:
- X11 forwarding *works* for root, but not me -- what changed?
- From: Kevin the Drummer
- X11 forwarding *works* for root, but not me -- what changed?
- Prev by Date: Re: Hello Request
- Next by Date: Re: how to enable iptables from CLI
- Previous by thread: Re: X11 forwarding *works* for root, but not me -- what changed?
- Next by thread: security theme for undergraduate final thesis
- Index(es):
Relevant Pages
|